@dynamic-labs-sdk/client 1.32.0 → 1.33.0

package/dist/{waas-DzcYsWU8.esm.js → waas-D_alZrtb.esm.js}

@@ -1,8 +1,8 @@
-import { E as isWaasWalletProvider, Et as version, R as getWalletAccounts, St as getCore, T as findWaasWalletProviderByChain, Tt as name, V as getChainFromVerifiedCredentialChain, b as InvalidParamError, c as createApiClient, k as DYNAMIC_WAAS_METADATA, l as __refreshAuth_wrapped, mt as assertDefined, s as NoWalletProviderFoundError, t as __logoutWithReason_wrapped, w as isWaasWalletAccount, yt as getDefaultClient, z as formatWalletProviderKey } from "./logoutWithReason-x8mE7EAy.esm.js";
-import { n as isDynamicWaasEnabled, o as NotWaasWalletProviderError, r as getWaasWalletProviderFromWalletAccount } from "./migrateFromFireblocks-BapjEhra.esm.js";
-import { n as getWalletProviderByKey, t as getVerifiedCredentialForWalletAccount } from "./getVerifiedCredentialForWalletAccount-C--Dza_K.esm.js";
+import { A as DYNAMIC_WAAS_METADATA, B as formatWalletProviderKey, D as isWaasWalletProvider, Dt as name, E as findWaasWalletProviderByChain, H as getChainFromVerifiedCredentialChain, Ot as version, T as isWaasWalletAccount, Tt as BaseError, c as createApiClient, gt as assertDefined, l as __refreshAuth_wrapped, s as NoWalletProviderFoundError, t as __logoutWithReason_wrapped, wt as getCore, x as InvalidParamError, xt as getDefaultClient, z as getWalletAccounts } from "./logoutWithReason-I6vShLpA.esm.js";
+import { n as isDynamicWaasEnabled, o as NotWaasWalletProviderError, r as getWaasWalletProviderFromWalletAccount } from "./migrateFromFireblocks-Dtk6t8hN.esm.js";
+import { n as getWalletProviderByKey, t as getVerifiedCredentialForWalletAccount } from "./getVerifiedCredentialForWalletAccount-Fr3bEKeU.esm.js";
 import { assertPackageVersion } from "@dynamic-labs-sdk/assert-package-version";
-import { AssignableBusinessAccountMemberRole, JwtVerifiedCredentialFormatEnum, TokenScope, UserIdentifierTypeEnum, WaasChainEnum, WaasPolicyLayerRuleOperationOpEnum, WaasPolicyLayerUpdateRequestOpEnum, WaasPolicyRuleType, WaasSignerPolicyLayerUpdateRequestOpEnum, WaasWalletShareSetType, WalletProviderEnum } from "@dynamic-labs/sdk-api-core";
+import { JwtVerifiedCredentialFormatEnum, TokenScope, UserIdentifierTypeEnum, WaasChainEnum, WaasPolicyLayerRuleOperationOpEnum, WaasPolicyLayerUpdateRequestOpEnum, WaasPolicyRuleType, WaasSignerPolicyLayerUpdateRequestOpEnum, WaasWalletShareSetType, WalletProviderEnum } from "@dynamic-labs/sdk-api-core";
 
 //#region src/modules/waas/waas.consts.ts
 /**
@@ -64,7 +64,9 @@ const IDENTIFIER_TYPE_TO_API = {
 *
 * @param params.businessAccountId - The ID of the business account.
 * @param params.targetIdentity - The member to add (userId, or identifier + identifierType).
-* @param [params.role] - The member role (`admin` or `viewer`). Defaults to `viewer`.
+* @param [params.role] - The member role: a built-in (`admin`, `viewer`) or a
+*   role this account defined. Defaults to `viewer`. `owner` is rejected — use
+*   `transferBusinessAccountOwnership`.
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns The created business account member.
 * @notInstrumented
@@ -80,7 +82,7 @@ const addBusinessAccountMember = async ({ businessAccountId, targetIdentity, rol
 	return await apiClient.sdkAddBusinessAccountMember({
 		addBusinessAccountMemberSdkRequest: {
 			identifier,
-			role: role === "admin" ? AssignableBusinessAccountMemberRole.Admin : AssignableBusinessAccountMemberRole.Viewer,
+			role: role ?? "viewer",
 			smsCountryCode,
 			socialProvider,
 			type: identifierType ? IDENTIFIER_TYPE_TO_API[identifierType] : void 0,
@@ -124,10 +126,12 @@ const getWaasWalletProviderByChain = ({ chain }, client) => {
 * @param [params.password] - Password for the current signer's share, if it is password-encrypted.
 * @param [params.targetSignerPassword] - Password used to encrypt the new signer's share. Required when wallet passwords are required by the environment.
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
-* @returns The new signer's share set id.
+* @returns The new signer's share set id, or a consent-pending answer when the
+* account governs `addSignerToWallet` — the reshare has NOT run in that case.
+* Narrow it with `isBusinessAccountActionRequired`.
 * @notInstrumented
 */
-const addBusinessAccountSigner = async ({ walletAccount, businessAccountId, walletId, targetIdentity, signerType, password, targetSignerPassword }, client = getDefaultClient()) => {
+const addBusinessAccountSigner = async ({ walletAccount, businessAccountId, walletId, targetIdentity, signerType, password, targetSignerPassword, intent, intentSignature }, client = getDefaultClient()) => {
 	assertTargetIdentity({
 		fnName: "addBusinessAccountSigner",
 		targetIdentity
@@ -145,6 +149,8 @@ const addBusinessAccountSigner = async ({ walletAccount, businessAccountId, wall
 	}
 	const result = await getWaasWalletProviderByChain({ chain: walletAccount.chain }, client).reshareToNewSignerShareSet({
 		businessAccountId: resolvedBusinessAccountId,
+		intent,
+		intentSignature,
 		password,
 		signerType,
 		targetSignerIdentity: targetIdentity,
@@ -155,6 +161,20 @@ const addBusinessAccountSigner = async ({ walletAccount, businessAccountId, wall
 	return result;
 };
 
+//#endregion
+//#region src/errors/UnexpectedConsentResponseError.ts
+var UnexpectedConsentResponseError = class extends BaseError {
+	constructor({ message }) {
+		super({
+			cause: null,
+			code: "unexpected_consent_response_error",
+			docsUrl: null,
+			name: "UnexpectedConsentResponse",
+			shortMessage: message
+		});
+	}
+};
+
 //#endregion
 //#region src/modules/waas/businessAccounts/addWalletToBusinessAccount/addWalletToBusinessAccount.ts
 /**
@@ -166,21 +186,31 @@ const addBusinessAccountSigner = async ({ walletAccount, businessAccountId, wall
 * mutation with no MPC step, so a rejection (e.g. a 422 resource-limit) surfaces
 * as a thrown error rather than stalling in the iframe bridge.
 *
+* When the account governs `linkWallet`, nothing is written and the 202 body is
+* returned instead — first the intent to sign, then the proposal collecting
+* approvals. Narrow it with `isBusinessAccountActionRequired`.
+*
 * @param [params.businessAccountId] - The business account to link to; found-or-created when omitted.
 * @param params.walletId - The ID of the wallet to link.
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
-* @returns The updated business account detail.
+* @returns The updated business account detail, or the outstanding action required.
 * @notInstrumented
 */
 const addWalletToBusinessAccount = async ({ businessAccountId, walletId }, client = getDefaultClient()) => {
 	const core = getCore(client);
-	const detail = await createApiClient({ elevatedAccessTokenScope: TokenScope.BusinessAccountlinkWallet }, client).sdkLinkBusinessAccountWallet({
+	const response = await createApiClient({ elevatedAccessTokenScope: TokenScope.BusinessAccountlinkWallet }, client).sdkLinkBusinessAccountWalletRaw({
 		environmentId: core.environmentId,
 		linkBusinessAccountWalletSdkRequest: {
 			businessAccountId,
 			walletId
 		}
 	});
+	if (response.raw.status === 202) {
+		const payload = await response.raw.json();
+		if (payload.reason !== "INTENT_REQUIRED" && payload.reason !== "APPROVALS_REQUIRED" || !payload.intent) throw new UnexpectedConsentResponseError({ message: `addWalletToBusinessAccount: unexpected 202 body: ${JSON.stringify(payload)}` });
+		return payload;
+	}
+	const detail = await response.value();
 	await __refreshAuth_wrapped(client);
 	return detail;
 };
@@ -1480,6 +1510,34 @@ const importWaasPrivateKey = async ({ chain, privateKey, thresholdSignatureSchem
 	});
 };
 
+//#endregion
+//#region src/modules/waas/businessAccounts/isBusinessAccountActionRequired/isBusinessAccountActionRequired.ts
+/**
+* Narrows a governed mutation's result to the not-yet-authorized case.
+*
+* A governed action answers 202 with the bytes to sign, or with the proposal
+* collecting approvals — neither is an error, so both come back as a value. Use
+* this to tell them apart from the applied result.
+*
+* @param result - What a governed business-account mutation returned.
+* @returns True when the action still needs a signature or approvals.
+*
+* @example
+* ```ts
+* const result = await addWalletToBusinessAccount({ walletId });
+* if (isBusinessAccountActionRequired(result)) {
+*   await signIntent(result.intent);
+*   return;
+* }
+* console.log(result.members.length);
+* ```
+*
+* @see {@link BusinessAccountActionRequired} for the shape this narrows to.
+* @see {@link addWalletToBusinessAccount} for a governed mutation that can return it.
+* @notInstrumented
+*/
+const isBusinessAccountActionRequired = (result) => "reason" in result && (result.reason === "INTENT_REQUIRED" || result.reason === "APPROVALS_REQUIRED");
+
 //#endregion
 //#region src/modules/waas/isPasswordRequiredForWaasWallets/isPasswordRequiredForWaasWallets.ts
 /**
@@ -1990,17 +2048,16 @@ const updateBusinessAccount = async ({ businessAccountId, name: name$1 }, client
 
 //#endregion
 //#region src/modules/waas/businessAccounts/updateBusinessAccountMemberRole/updateBusinessAccountMemberRole.ts
-const ROLE_TO_API = {
-	admin: AssignableBusinessAccountMemberRole.Admin,
-	viewer: AssignableBusinessAccountMemberRole.Viewer
-};
 /**
-* Changes an existing member's role between `admin` and `viewer` (owner-/admin-only).
-* Owner is not assignable here — use `transferBusinessAccountOwnership` for that.
+* Changes an existing member's role (owner-/admin-only) to any role the account
+* defines — a built-in or a custom one, including from one custom role to
+* another. Owner is not assignable here — use
+* `transferBusinessAccountOwnership` for that.
 *
 * @param params.businessAccountId - The business account the member belongs to.
 * @param params.userId - The member whose role changes.
-* @param params.role - The new role (`admin` or `viewer`).
+* @param params.role - The new role: a built-in (`admin`, `viewer`) or a role
+*   this account defined.
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns The updated business account member.
 *
@@ -2022,7 +2079,7 @@ const updateBusinessAccountMemberRole = async ({ businessAccountId, userId, role
 	return await createApiClient({ elevatedAccessTokenScope: TokenScope.BusinessAccountmemberroleupdate }, client).sdkUpdateBusinessAccountMemberRole({
 		businessAccountId,
 		environmentId: core.environmentId,
-		updateBusinessAccountMemberRoleSdkRequest: { role: ROLE_TO_API[role] },
+		updateBusinessAccountMemberRoleSdkRequest: { role },
 		userId
 	});
 };
@@ -2146,5 +2203,5 @@ const upsertWalletPolicyRule = async ({ rule, walletAccount }, client = getDefau
 assertPackageVersion(name, version);
 
 //#endregion
-export { WaasWalletShareSetType$1 as $, getChainsMissingWaasWalletAccounts as A, isWalletCreationRequirement as B, importWaasPrivateKey as C, getWalletAccountShareSets as D, getWalletPolicyLayer as E, desugarPolicyRules as F, createBusinessAccount as G, createPolicy as H, delegateWaasKeyShares as I, backupWaasKeySharesToGoogleDrive as J, buildDenyPolicyRule as K, createWalletForBusinessAccount as L, getAccountPolicyLayer as M, exportWaasPrivateKey as N, getSignerPolicyLayer as O, exportWaasClientKeyshares as P, WaasChainEnum$1 as Q, createWaasWalletAccounts as R, isPasswordRequiredForWaasWallets as S, getWalletRecoveryState as T, resolvePolicyScope as U, createWaasOfflineRecoveryShares as V, expandPolicyRules as W, addBusinessAccountSigner as X, addWalletToBusinessAccount as Y, addBusinessAccountMember as Z, removeBusinessAccountSigner as _, updateBusinessAccountMemberRole as a, refreshWaasWalletAccountShares as b, transferBusinessAccountOwnership as c, setWaasWalletAccountPassword as d, revokeWaasDelegation as f, removeBusinessAccountWallet as g, removePolicyRules as h, updateWaasPassword as i, getBusinessAccount as j, getPolicy as k, signSerializedTransaction as l, removeSignerPolicyRule as m, upsertSignerPolicyRule as n, updateBusinessAccount as o, removeWalletPolicyRule as p, buildAllowPolicyRule as q, upsertAccountPolicyRule as r, unlockWallet as s, upsertWalletPolicyRule as t, shouldAutoCreateWalletForChain as u, removeBusinessAccountMember as v, hasDelegatedAccess as w, listBusinessAccounts as x, removeAccountPolicyRule as y, normalizeWalletRequirements as z };
-//# sourceMappingURL=waas-DzcYsWU8.esm.js.map
+export { WaasChainEnum$1 as $, getPolicy as A, normalizeWalletRequirements as B, isBusinessAccountActionRequired as C, getWalletPolicyLayer as D, getWalletRecoveryState as E, exportWaasClientKeyshares as F, expandPolicyRules as G, createWaasOfflineRecoveryShares as H, desugarPolicyRules as I, buildAllowPolicyRule as J, createBusinessAccount as K, delegateWaasKeyShares as L, getBusinessAccount as M, getAccountPolicyLayer as N, getWalletAccountShareSets as O, exportWaasPrivateKey as P, addBusinessAccountMember as Q, createWalletForBusinessAccount as R, isPasswordRequiredForWaasWallets as S, hasDelegatedAccess as T, createPolicy as U, isWalletCreationRequirement as V, resolvePolicyScope as W, addWalletToBusinessAccount as X, backupWaasKeySharesToGoogleDrive as Y, addBusinessAccountSigner as Z, removeBusinessAccountSigner as _, updateBusinessAccountMemberRole as a, refreshWaasWalletAccountShares as b, transferBusinessAccountOwnership as c, setWaasWalletAccountPassword as d, WaasWalletShareSetType$1 as et, revokeWaasDelegation as f, removeBusinessAccountWallet as g, removePolicyRules as h, updateWaasPassword as i, getChainsMissingWaasWalletAccounts as j, getSignerPolicyLayer as k, signSerializedTransaction as l, removeSignerPolicyRule as m, upsertSignerPolicyRule as n, updateBusinessAccount as o, removeWalletPolicyRule as p, buildDenyPolicyRule as q, upsertAccountPolicyRule as r, unlockWallet as s, upsertWalletPolicyRule as t, shouldAutoCreateWalletForChain as u, removeBusinessAccountMember as v, importWaasPrivateKey as w, listBusinessAccounts as x, removeAccountPolicyRule as y, createWaasWalletAccounts as z };
+//# sourceMappingURL=waas-D_alZrtb.esm.js.map